Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
59c50d9ef255c39abdb2064f0ea5c382.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59c50d9ef255c39abdb2064f0ea5c382.exe
Resource
win10v2004-20231215-en
Target
59c50d9ef255c39abdb2064f0ea5c382
Size
203KB
MD5
59c50d9ef255c39abdb2064f0ea5c382
SHA1
4d6dd4e9bfa003a9b5949c61d8577a29aacdf57d
SHA256
76424510ab66cd17d6aa0eb90165cdd7f5eb03854ac4641f8e1f3ce6442ffc23
SHA512
eb6585590095db5aed4beb0bf6a45db3142823ddee4229c0fa86499d9416c9f6a9ee80a98f975a218ac55952f6401d67fde56d733a942bc3f6f7c4fe36d2f806
SSDEEP
6144:/Pf5WUBlTpkaLKsYLyut+lJig5KbnxkPlM:/PHBJXYVElJig+nYlM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ